Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: YlskynU98htZOsl0iQuFmsGEn5MuFZmZtbeuDe2u1qI=
Subject key identifier: CD:8C:ED:48:3A:DA:12:FC:06:6D:3C:C3:5D:4F:E0:04:79:60:67:98
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 0199240D7EF9B73ABCBFC1F2C8A17A448412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0B25
Signing time: Sun 07 Sep 2025 12:01:27 +0000
Manifest this update: Sun 07 Sep 2025 12:01:27 +0000
Manifest next update: Mon 08 Sep 2025 12:01:27 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: WfxD8K8O1Jz8uiftvNrr7fpcPuWEmiLX630IfnSQDSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:7e:f9:b7:3a:bc:bf:c1:f2:c8:a1:7a:44:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Sep 7 12:01:27 2025 GMT
Not After : Sep 8 12:01:27 2025 GMT
Subject: CN=cd8ced483ada12fc066d3cc35d4fe00479606798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:a3:bc:c6:9f:d9:6e:ee:a0:3f:76:30:a6:
fa:9f:df:0b:94:fb:f1:64:ca:24:7a:a0:42:68:f9:
49:5d:33:34:f2:d3:1b:23:7e:d0:0b:f8:e8:d2:2c:
9c:07:50:d7:92:1a:b9:71:ac:47:42:1f:df:64:4d:
e9:47:39:9f:a2:16:3d:ee:ed:64:96:c0:b8:3c:f1:
fd:27:d9:0e:f0:84:f8:c0:ac:a7:00:6f:d3:f6:59:
0d:23:00:2b:28:ad:f6:83:13:3a:a4:7d:73:2c:aa:
17:c7:f6:54:53:3b:93:81:3b:eb:94:db:82:8f:68:
bf:ca:bd:5e:08:8e:76:d6:14:98:5d:dd:64:dc:e3:
1d:e3:fc:9d:a7:a0:f1:cb:b2:7a:50:84:04:38:9d:
af:40:c7:45:66:6d:4e:a4:a0:82:d4:f3:dd:8d:be:
3d:de:f4:da:04:4d:75:46:f4:e1:b8:eb:8f:68:65:
f3:ae:8d:e0:73:a2:2e:48:af:81:06:24:29:df:64:
cd:e6:de:a7:4b:bd:14:03:1e:1b:40:00:8b:a0:67:
ee:55:8d:34:47:a2:d0:45:fe:30:9d:02:5f:e4:82:
70:b9:92:34:c7:c5:15:0a:32:f8:3c:59:5e:90:d4:
47:88:bd:47:fe:02:67:95:69:13:ad:b1:7f:3a:52:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:ED:48:3A:DA:12:FC:06:6D:3C:C3:5D:4F:E0:04:79:60:67:98
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:f8:ab:fe:ca:1b:e5:bc:e7:ec:07:e2:a2:11:d7:a0:02:
c8:da:c0:ec:20:54:0c:36:5b:27:9a:32:7f:da:c2:24:1c:a3:
8a:6f:d5:73:76:9e:04:e4:aa:9a:a2:e1:40:4e:46:83:04:79:
2c:e7:a9:34:af:bf:a6:44:4b:ba:15:d4:4b:33:0a:4e:85:74:
53:2c:be:41:23:2b:0c:2f:db:dc:e5:3f:d0:23:d2:44:b1:3d:
10:da:41:71:11:f8:43:b7:a5:53:4d:2d:23:62:f7:2a:e3:dc:
96:32:c2:74:39:2b:62:d8:7f:f7:b3:1d:65:8b:0b:0b:e6:4b:
96:02:85:5a:74:0b:49:11:ae:19:22:35:09:d2:7a:25:6c:16:
a2:7c:d5:a8:6f:d8:67:fc:76:30:04:a9:c8:6d:c1:6b:fe:38:
9d:46:2a:b9:51:fd:9b:88:81:39:06:41:b2:2c:4b:bf:1b:08:
47:97:25:60:1f:a2:c0:03:5e:3e:fa:ad:21:68:d4:c4:70:90:
6f:9e:df:d1:62:dc:81:4b:cc:29:ed:7a:1a:7f:30:56:c4:32:
38:17:8e:d3:13:22:22:2e:6c:f1:15:1b:e7:c9:ff:88:f2:ba:
8a:7b:d4:79:a9:c3:ee:51:41:50:56:86:f6:50:81:e3:98:d7:
cd:0e:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:20 2025 by rpki-client